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In  this  paper,  which  extends  earlier  work,  on  decision  procedures 
for  various  quantified  and  unquantified  restricted  sublanguages  of  set 
theory  (see  [FOS80] ,  [BF0S81],  [BF84]),  we  consider  the  language  built 
using  the  elementary  Boolean  connectives  (conjunction,  disjunction, 
implication,  negation)  from  set-theoretic  clauses  of  the  forms 

(I)         X  =  y  Uz,  x  =  y\z,   xey,   x  =  0,   u  =  Un(y)  . 

In  (I),  the  symbol  Un(y)  designates  the  union  of  all  members  of  y,  i.e. 
{x|(3z  e  y)  xe  z}  .  Note  that  relationships  x  _C  y,  x  =  yH  z,  etc. 
(and  obviously  x  ^  y,  x  j^  y,  etc.)  can  easily  be  expressed  in  this 
language.  The  still  more  restricted  language  obtained  by  forbidding 
appearances  of  the  operator  Un  is  studied  in  [FOS80]  and  a  (relatively 
simple)  decision  algorithm  given  for  it.  The  case  In  which  only  one 
clause  of  the  form  u  =  Un(y)  is  allowed  was  treated  in  [BF84]. 

As  in  the  previous  papers  in  this  sequence,  the  intended  meaning 
of  the  language  is  that  in  which  variables  range  over  (possibly 
infinite)  sets,  and  the  various   standard   set-theoretic   operator   and 
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predicate  symbols  appearing  In  (1)  have  their  standard  meanings;  hence 
an  Interpretation  (or  model)  M  of  a  set  of  sentences  P  Is  a  function 
which  maps  every  variable  x  Into  a  set  Mx.  If  all  the  sentences  of  P 
are  true  under  some  Interpretation  of  this  kind,  P  Is  said  to  be 
satlsf lable.  Our  aim  is  to  exhibit  an  algorithm  which  decides  the 
satisf iabiity  of  such  sets  P  of  sentences.  As  in  the  preceding  papers 
of  this  sequence,  we  can  suppose  without  loss  of  generality  that  P  is 
simply  a  conjunction  of  clauses  of  the  form  (1)  as  well  as  clauses  of 
the  form  x  4  f.  In  what  follows,  this  assumption  is  made  unless  the 
contrary  is  explicitly  Indicated. 

Suppose  that  a  set  P  of  simple  clauses  of  the  kind  described  above 
is  given.  Then  a  place  a  (for  P)  is  a  0/1-valued  function  defined  on 
the  set  of  all  variables  in  P  such  that  a(x)  =  a(y)  V  a(z)  (resp.  a(x) 
=  ot(y)  &  I  a(z))  if  X  =  y  u  z  (resp.  x  =  y  \  z)  appears  in  P,  and 
such  that  a(x)  =  0  If  x  =  0  appears  in  P.  Given  a  variable  x,  the  place 
a  is  said  to  be  a  place  at  x  (for  P)  if  a(y)  =  1  whenever  x  e  y  appears 
in  P  and  a(y)  =  0  when  x  4   y   appears  in  P. 

Any  model  M  of  the  statements  of  P  defines  a  set  of  places  for  P, 
and  the  structure  of  this  set  of  places  goes  a  long  way  toward 
describing  the  structure  of  the  model  M.  More  specifically,  let  p  be 
any  point  appearing  in  the  model;  then  the  function  a  defined  by  a(x)  = 
1  if  p  e  Mx,  a(x)  =  0  if  p  ^  Mx  is  clearly  a  place,  and  for  each  x,  the 
place  which  contains  Mx  is  clearly  a  place  at  x.  Moreover,  if  we  are 
given  any  model  M  and  any  place  a,  then  we  can  consider  the  set 

(2)         ''a  ^  ^  P  I  P  ^  Mx  •<->  a(x)  =  I  ,  for  all  variables  x)  , 
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whlch  can  be  called  the  set  of  points  (of  the  universal   space  of   the 

model  M)   associated  with  the  place  a.   It  is  convenient  to  consider 

only  places  a  for  which  a   ?'  0  as  places  of  the  model  M  and  to  exclude 

the   others.    This   will   be   done   in  what   follows.    With   this 

understanding,  the  subsets  o^  are  clearly  disjoint  and  o^  C  ^^  if   and 

only   if  Qi(x)   =   1.   Each   set  o^  is  either  wholly  contained  In  Hx  or 

wholly  disjoint  from  it,   and  Mx  =   U    o^  .    Note   also   that   two 

a(x)  =  l  =' 

variables  x,y  have  the  same  representation  in  a  model  M  if  and  only  if 
ci(x)  =  a(y)  for  all  places  of  the  model.  It  will  be  convenient  in  what 
follows  always  to  use  lower-case  Greek  letters  to  designate  places,  and 
also  to  write  a  C  x  when  a^  C  x,  i.e.   when  a(x)  =  1. 

The  set  H.  of  all  possible  places  associated  with  the  set  P  of 
clauses  is.  clearly  finite  and  easily  calculated.  We  aim  to  state  the 
condition  that  P  should  be  satisfiable  using  only  combinatorial 
conditions  on  the  clauses  of  P  and  on  the  set  of  places  which  actually 
appear  in  a  model  M  of  P.  This  is  clearly  some  subset  n  of  ^^  i  ,  which 
we  suppose  to  have  been  chosen  in  advance.  As  noted  just  above,  once  H 
is  known  we  know  exactly  which  variables  are  equal.  We  shall  therefore 
suppose  that  (after  11  is  chosen)  equal  variables  are  identified  in  our 
set  of  clauses. 

All  the  essential  complications  that  need  to  be  faced  are 
connected  with  the  presence  in  P  of  finitely  many  clauses  of  the  form 
u^  =  Un(yj^),  which  will  be  referred  to  as  the  Uclauses  of  P.  The 
variables  y^^  appearing  on  the  right  of  clauses  of  this  form  will  be 
called  Uvarlables.  Since  u  =  Un(y)  and  u'  =  Un(y)  implies  u  =  u' ,  we 
can  clearly  suppose  without  loss  of  generality  that  each  Uvariable  y^^ 
appears  in  just  one  Uclause. 
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The  following  definition  takes  a  first  step  toward  elucidating  the 
logical  weight  of  the  Uclauses  in  P. 

Definition  1:  Given  P  and  11  as  above,  the  Ugraph  G  of  P,n  is  the 
graph  whose  set  of  nodes  is  IT ,  plus  one  additional  node  ^  ,  and  whose 
edges  are  as  follows: 

(1)  A  directed  edge  connects  a  to  f2  if  and  only  if  a(y.)  =  0  for 
every  Uvariable  y^^.  (Intuitively,  this  means  that  the  Uclauses  of  P 
tell  us  nothing  about  the  set  Un(a  )). 

(ii)  Otherwise,  a  directed  edge  connects  the  place  a  to  the  place 
5  if  and  only  if  B(uj^)  =  1  for  all  clauses  u^  =  UnCy^^)  such  that  a(yj^) 
=  1 .  In  this  case,  we  write  a  =>  0 .  (If  there  are  no  such  B ,  then  a  is 
not  the  source  node  of  any  edge  of  G.)  Intuitively,  the  nodes  6  such 
that  a  =>  B  represent  all  the  sets  a^  In  which  elements  of  Un(aQj)  can 
appear.   If  there  are  no  such  3,  Un(a^)  is  necessarily  null. 

We  shall  call  a  node  a  of  G  safe  if  there  is  a  directed  path 
through  G  starting  At  a,  which  reaches  ^.  A  node  a  will  be  called  null 
if  there  is  no  B  such  that  a  =>  0 ,  and  is  said  to  be  trapped  if  every 
sufficiently  long  path  forward  from  ot  eventually  reaches  a  null  node. 
A  node  a  which  is  neither  safe  nor  trapped  will  be  called  cyclic;  some 
path  forward  from  such  a  node  can  always  be  extended  indefinitely,  but 
must  then  traverse  certain  other  nodes  repeatedly.  Note  that  if  a  is 
safe,  so  is  every  0  such  that  0  =>  a ;  hence  if  a  is  trapped  or  cyclic 
and  a  =>  0 ,  0  is  also  trapped  or  cyclic. 

It  is  very  easy  to  see  that  complications  greater  than  those 
encountered  when  no  clauses  u^^  =  Un(yj^)  are  present  must  be  expected  in 
the  case  before  us.   For  example,  the  clauses  u  =  Un(v),  v  =  Un(u),  u  =f 
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t  can  be  satisfied,  but  only  by  an  Infinite  model.  Nevertheless,  the 
arguments  which  follow  will  show  that  It  Is  not  hard  to  deal  with  these 
infinities.  However,  worse  combinatorial  difficulties  are  connected 
with  the  possible  existence  of  trapped  places.  To  see  why  this  should 
be  so,  define  the  height  of  a  trapped  place  t  as  one  more  than  the 
length  of  the  longest  path  forward  from  x  to  a  null  place.  Suppose 
that  there  Is  a  model  for  our  set  of  clauses,  which  therefore 
associates  a  set  Mx  with  every  variable  x  and  a  set  o  with  every  place 
a.  If  T  Is  of  height  1,  i.e.  null,  we  have  Un(a^  )  =  t,  so  a^  =  it)  ; 
hence  there  can  be  only  one  such  place,  which  must  be  a  place  at  0. 
Define  the  height  of  any  set  s  Inductively  as  one  more  than  the  maximum 
height  of  any  of  Its  elements.  Then  it  follows  inductively  that  if  t 
is  a  trapped  place  the  height  of  a^  is  at  most  the  height  of  t .  This 
restricts  a^  to  one  of  a  finite  collection  of  possible  values,  namely 
if  H  is  the  maximum  height  of  any  trapped  place  and  F„  is  the  (finite) 
collection  of  all  sets  of  height  less  than  H,  a  must  have  some  value 
in  ^H+1*  ^^  will  see  below  that  if  there  are  no  trapped  places, 
restrictions  of  this  kind,  which  prevent  a  from  being  infinite  and 
cause  the  combinatorial  complications  alluded  to  above,  do  not  occur. 

Suppose  once  more  that  a  model  exists.  Form  the  union  E  of  a^  ,  a 
running  over  all  trapped  and  cyclic  places.  Then  since  every  S  such 
that  a  =>  3  must  also  be  trapped  or  cyclic,  it  follows  that  Un(Z  )  c^Z  . 
Take  any  element  pj^  e  a^  C  E.  If  pj^  ^  0,  it  has  an  element  P2 
belonging  to  some  6  such  that  a  =>  6;  if  P2  ^  0,  we  can  repeat  this 
argument  to  produce  p,  ,  etc.  This  gives  a  sequence  ...  p^  e  P2  e  p^ 
e  o^  ,  which  by  the  set-theoretic  axiom  of  well-f oundedness  cannot  be 
infinite.   It  follows  that  there  must  be  a  path  through  G  to  a   node  a 
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which   Is   a   place   at  t.      This  gives  a  first  necessary  condition  for 
satisfiability: 

Condition  CI;  Let  the  set  P  of  clauses  be  satlsflable  by  a  model 
whose  set  of  places  Is  11,  and  define  the  Ugraph  G  corresponding  to  P  ,11 
as  above.  Then,  If  there  are  any  non-safe  places  in  H  ,  there  must 
exist  a  non-safe  place  y  which  lies  along  a  path  through  G  from  every 
non-safe  node.   Moreover,  y  must  be  a  place  at  0. 

If  condition  CI  is  satisfied,  we  can  define  a  useful  auxiliary  map 
ij;  of  places  to  places  as  follows:  given  a,  let  'J' (a )  be  any  node  B  which 
is  1  step  closer  to  ^  (resp.  y)  along  a  path  of  minimum  length  leading 
from  a  to  n  (resp.  y).  If  a  =>  ^  ,  put  ^l;  (a )  =  f2 .  Moreover  if  y  is  not 
null  (which  implies  that  no  a  is  null)  choose  any  a  such  that  y  =>  a , 
and  put  'J' (y )  =  ot.  The  map  ^  will  be  used  later  when  we  come  to 
construct  a  model  for  P.  Before  this,  however,  we  need  to  state 
additional  satisfiability  conditions. 

Suppose  once  more  that  we  have  a  model  M  for  P,  and  derive  the 
sets  a^  and  the  Ugraph  G  from  this  model  as  above.  For  any  two  sets 
s,t  write  s  e  t  if  there  is  a  chain  of  Intermediate  elements  s^  such 
that  s  e  s,  e  ...  e  s^  e  t.  Since  in  set  theory  a  circular  sequence 
of  membership  relations  s^  z  s^  is  impossible,  any  finite  collection  C 
of  sets  can  be  enumerated  in  such  a  way  as  to  ensure  that  no  set  of  C 
can  s  e  t  to  a  set  t  coming  earlier  in  sequence.  In  the  following 
discussion  it  is  supposed  that  the  variables  appearing  in  P  are 
arranged  in  a  sequence  derived  from  such  an  enumeration  of  the  sets  Mx. 
For  each  variable  x,  consider  the  set  n  of  all  places  a  such  that 
Mx  e  a^  .  Then  plainly  we  must  have  a(y)  =  0  for  all  y  preceding  x  in 
sequence.   Moreover,  If   Mx  £   a    and  a^    C  Mu^   =   Un(My^)   for   some 
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Uvariable  y.  and  clause  u^  =  Un(yj^),  then  there  must  exist  a  place 
^  £  ^i  such  that  0  =>  a ,  and  such  that  Mx  e  o^  .  For  each  a  such  that 
Mx  e  a^  for  any  variable  x  and  for  each  Uvariable  y^^  such  that 
a  C  u^  ,  choose  any  5  ^  y^  such  that  3  «>  a  and  Mx  e  Og  and  call  It 
<}>^(a,y^^).  Finally,  define  i})(a,y^)  for  all  Uvariables  y^  such  that 
a  C  u.  as  any  0  C  y^  such  that  0  =>  a .  This  gives  us  a  collection  of 
maps  <1>  ,  <j)„  and  a  collection  of  sets  H  of  places,  one  for  each  variable 
X  appearing  in  P,  having  the  following  properties: 

(i)  ({)(a,y^)  is  defined  for  all  places  a  and  Uvariables  y^^  such 
that  ct  C  Uj^  ,  where  u^  =  Un(yj^)  is  in  P;  and  the  value  0  =  4>(a,y£)  is  a 
place  such  that  3  C  y .  and  0  =>  a . 

(ii)  For  each  variable  x,  the  place  a^  at  x  defined  by  ct^Cy)  =  1 
iff  Mx  e  My  belongs  to  II  ,  and  moreover  if  ot  e  H^  and  ot  ^  u^  ,  then 
■^x^^'^i^  is  defined  and  (jj^^Ca.y^)  e  11^^  . 

(iii)  For  each  variable  x,  none  of  the  places  a  e  II  satisfy  a  C_  y 
for  any  variable  y  which  is  either  equal  to  x  or  comes  before  x  in  the 
enumeration  of  variables  defined  above. 

In  what  follows,  it  will  be  convenient  to  call  an  enumeration  of 
variables  and  maps  (j)  and  ^  having  properties  (i)-(iii)  a  good  Uorder 
(of  variables)  and  good  Umaps  respectively;  we  will  not  bother  to 
introduce  a  corresponding  term  for  the  sets  H^  of  places,  though  of 
course  such  sets  of  places  must  be  defined  in  connection  with  any 
purported  good  Umap  ^      . 

The  preceding  discussion  allows  us  to  state  a  second  condition 
necessary  for  satisfiability: 

Condition  C2:  Let  P,  II,  G,  etc.  be  as  in  Condition  CI  above. 
Then   (if   P   is  satisftable)  a  place  a^  e  n  such  that  Ox^y)  =  1  (resp. 
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a  (y)  =  0)  if  X  e  y  (resp.   x  ^  y)  occurs  In  P  must  be  defined  for  each 
variable  x  appearing   In  P  and  there  must  exist  sets  ^^  ^  E.  ^  ^°^   each 
variable  x,  a  good  Uorder  of  variables  and  good  Umaps  iji  and  <^  ^   ,   which 
by  definition  will  have  the  properties  listed  in  (l)-(lll)  above. 

Still  one  more  necessary  condition  remains  to  be  stated.  To  see 
what  this  Is,  let  M,  •'a  .  ^x  »  ^^^'  ^^  ^^  above.  Then  if  u^  =  Un(y^) 
is  a  clause  and  Mx  c  My,  ,  we  must  have  Mx  c  Mu^  .  Hence  the  following 
condition  must  obviously  be  satisfied: 

Condition  C3;  If  u^  =  Un(yj^)  is  a  Uclause  of  P  and  ot^  C  y^  & 
OCX,  then  ^  C  u.  . 

This  completes  the  statement  of  all  conditions  for  satisfiability, 
at  least  in  the  absence  of  trapped  places.  That  is,  we  can  now  go  on 
to  show  that  if  there  are  no  trapped  places  in  the  Ugraph  G  of  P,  and 
if  Conditions  C1-C3  are  all  satisfied,  then  a  model  for  the  clauses  of 
P  can  be  constructed.  The  construction  of  this  model  is  easy  once  a 
sufficient  supply  of  'auxiliary  elements'  is  assured;  accordingly,  we 
will  begin  by  assuming  that  such  auxiliary  elements  with  the  needed 
properties  have  been  constructed,  and  will  show  how  these  can  be  used 
to  build  a  model  M.  After  this,  the  narrower  technical  problem  of 
constructing  the  auxiliary  elements  will  be  addressed. 

The  properties  which  the  auxiliary  elements  must  have  are  as 
follows: 

(a)  Suppose  that  condition  CI  is  satisfied,  and  let  the  set  n  of 
places,  the  Ugraph  G  and  the  map  ij) ,  etc.  be  as  in  that  condition. 
Then  we  assume  that  infinitely  many  distinct  singleton  sets  A,  called 
auxiliary  elements,  as  well  as  various  other  sets  B,  not  necessarily 
singletons,   can   be   associated  with  each  place  a  e  IT.   The  elements  B 
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will  be  called  secondary  elements,   and  any  auxiliary  or  secondary 

element  associated  with  a  e  H  will  be  said  to  be  resident  at  a .   Every 

secondary  element  B  must  satisfy  Be   A,   where  A  is  some  auxiliary 

element.    (As   above,   the   relationship   s  e   t   is   defined   by   the 

condition  that  there  should  exist  a  chain  of  sets  s,,...,Si^   such   that 

sesj^e...   es^^et.) 

(b)  No  two  auxiliary  elements  A, A'  can  satisfy  A  e   A'. 

(c)  If  ilia)  ^  ^,  every  element  of  an  auxiliary  or  secondary 
element  A  resident  at  the  place  a  is  a  secondary  element  resident  at 
the  place  i>ia). 

(d)  The  sets  of  auxiliary  and  secondary  elements  resident  at 
distinct  places  a ,B  are  always  disjoint. 

Suppose  that  infinitely  many  distinct  auxiliary  and  secondary 
elements  having  all  the  properties  (a),  (b),  (c),  (d)  are  available. 
Then  we  can  build  a  model  M  for  the  clauses  of  P  as  follows: 

(1)  Arrange  the  infinite  sequence  of  auxiliary  elements  resident 
at  each  a  in  1-1  association  with  the  lattice  points  of  the  plane,  i.e. 
divide  them  into  infinitely  many  infinite  'rows'.  The  construction  to 
be  described  will  iterate  through  a  sequence  of  steps,  each  of  which 
may  require  countably  many  elements,  and  this  arrangement  simply 
ensures  that  the  construction  will  never  exhaust  the  available  supply 
of  auxiliary  elements  A  resident  at  any  a.  In  what  follows,  we  will 
suppose  that  the  A  have  the  lexicographic  order  imposed  by  this 
arrangement  and  when  A  are  required  we  will  select  them  in  this  order. 

(2)  Initialize  each  of  the  sets  a^  by  inserting  all  the  secondary 
elements  resident  at  a  into  a^  .  in  addition,  put  three  distinct  and 
unique  auxiliary  elements  into  each  a^    .      Let  {/\p..A3j^}  be  the  set   of 
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all  auxiliary  elements  used  for  this.   Note  that  at  the  end  of  this 
step,  all  the  o^  are  disjoint  and  every  one  of  them  contains  at  least  3 
elements. 

(3)  By  the  stabilization  process  defined  by  the  maps  <}>  and  <i> 
appearing  in  condition  C2  we  designate  the  following  operation.  If  p 
has  been  put  into  a^  (either  in  initialization  step  (2)  or  in  the  first 
phase  of  the  stabilization  process  Itself),  then  for  every  Uclause  u.  = 
UnCy^^)  such  that  c  C  Uj^  choose  a  previously  unused  auxiliary  element  A 
resident  at  a,  put  the  pair  {p,A}  Into  the  set  Og  ,  where  Qj  = 
'^(^'jyi),  and  also  put  A  into  o^  .  Note  that  when  It  is  generated,  the 
pair  {p,A}  must  be  distinct  from  all  elements  previously  Inserted  into 
any  of  the  a^  ,  and  so  must  be  the  auxiliary  element  A.  Indeed,  A, 
which  is  a  singleton,  cannot  be  a  previously  formed  pair;  we  will  also 
see  below  that  it  cannot  equal  any  of  the  sets  Mx  that  we  form,  because 
such  sets  always  contain  at  least  three  elements.  For  the  same  reason, 
{p,A}  can  never  equal  a  set  Mx  or  a  previously  used  auxiliary  element, 
nor  can  it  equal  any  secondary  element  B  since  then  there  would  exist 
an  auxiliary  A'  such  that  A  e  A',  which  is  impossible.  Finally,  {p,A} 
can  never  equal  any  previously  formed  pair  {q,A'} ,  since  this  could 
only  happen  if  p  =  A',  q  =  A,  but  A  follows  A'  In  lexicographic  order 
so  that  the  pair  {A, A'}  would  never  have  been  formed. 

The  stabilization  process  continues  until  such  a  pair  {p,A}  has 
been  formed  for  every  p  Inserted  into  any  one  of  the  sets  a  .  The 
argument  just  given  shows  that  the  sets  a^  remain  disjoint  throughout 
the  stabilization  process.  Moreover,  whenever  {p,A}  is  inserted  in  6  = 
'J'('^»y^),  we  have  ct  C  uj^  and  p  is  already  in  o^  .  A  is  put  in  a^  ,  but 
alL   the   elements   of  A  are  secondary  elements  which  will  already  have 
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been  put  into  o .  /^  s  if  ij)(a)  ^   fJ ,  i.e.   if  a  C  y^  for  any  Uvariable  yj^ 
Hence,  since  the  condition 


Un(   ^    a_)  C   U    ^ 
°  £  ^i     ~  5  £  "i 


holds   initially  for  every  Uclause  u^  =  Un(yj^),  it  holds  throughout  the 

stabilization  process.    Thus   if   Mx  denotes   the   value    '-'   a^  , 

Mu^  D   Un(Myj^)   must   hold   when   the   stabilization  process  ceases  to 

generate  new  pairs.   But  because  of  all  the  pairs  {p,A}   inserted,   we 

must   also  have  Mu^^  C  Un(Myj^),  and  therefore  we  must  have  Muj^  =  Un(Myj^) 

for  every  Uclause  u^^  =  Un(y^).    Moreover,   since   all   the  a^   remain 

disjoint,  all  clauses  of  the  form  x=ynz,  x=y\   z,  and  x  =  0  must 

also  be  modeled  correctly.   Thus  it  only  remains  to  force  all  clauses 

x  e  y  and  tc  ^  y  to  be  modeled  correctly. 

For  this,  we  simply  work  through  the  sequence  of  all  variables,  x, 

treating  them  in  the  (ascending)  good  Uorder  mentioned  in  condition  C2. 

When  a  variable  x  is  processed,  all  the  places  a  C  x  will  have  received 

values  a^   which  will  never  change  subsequently,  so  that  we  can  define 

Mx  =   U   a   .   The  variable  t   can  be  bypassed,  since  M0  =  0  e  a^i,  will 
oc  c  X  ^ 

always  hold;  see  below.  To  process  other  variables  x,  Mx  is  inserted 
in  the  set  a   (where  a   is  the  designated  place  at  x  (see  above)),  and 

X 

the  stabilization  process  is  applied,  this  time  using  the  map  <fi  in 
place  of  the  map  <)> .   Note  in  this  connection  that 

(i)   Mx   cannot  be   identical  with  any  previously  generated 

element.  To  see  this,  note  that,  for  reasons  already  explained,  Mx 
cannot  be  Identical  with  any  auxiliary  or  secondary  element,  or  any 
pair  {p,A}.   Moreover,  no  two  sets  Mx.My  can  be   equal,   since   at   the 
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start  of  our  construction  Mx  n  {A, Ao^,}  =    ^   "n  ^  t  Ai  , . . .  .Ao^} 

a  c  X 

and  this  relationship  Is  never  disrupted  by  a  subsequent  insertion  of 
any  one  of  the  elements  of  { A^ , . . .  ,A3j^}  into  any  of  the  sets  a^    . 

(il)  If  a^  '^Yi  and  a  C^  x  ,  then  ct  C  u^  by  condition  C3.  Hence  if 
Mx  is  inserted  Into  My.  all  the  elements  of  Mx  must  already  belong  to 
Mu^  ,  proving  that  the  relationship  Muj^  2  Un(Myj^)  is  not  disrupted  by 
insertion  of  Mx   into  0   .    Thus   application   of   the   stabilization 

X 

process  restores  all  relationships  Mu.  =  Un(Myj). 

(iii)  By   condition  C2,   no  a  which  is  either  included  in  x  (i.e. 

a  C  x)  or  in  a  variable  y  which  comes  before  x  in  the  good  Uorder  of 

variables  can  be  part  of  a  chain  a,  of  places  satisfying  a^  ~  "l  »  °'i+l 

=  4'x(°'i»yi  ^*   However,  it  is  only  such  places  that  are  affected  either 
-"i 

by  insertion  of  Mx  into  a^  or  by  the  subsequent  stabilization  process. 

It  follows  that  no  relationship  My  =   '-'  a      is  disrupted  by  the  said 

a  c  y 

insertion  or  stabilization  operations.  This  guarantees  that  literals 
of  type  ye  z  or  y  ^  z  are  correctly  modeled.  Therefore  at  the  end  of 
the  series  of  steps  described  M  will  be  a  model  for  all  the  clauses  P. 

We  therefore  will  have  proved  that  Conditions  CI,  C2,  and  C3  are 
necessary  and  sufficient  for  satisfiability  of  P  (at  least  in  the 
situation  in  which  there  are  no  trapped  places)  as  soon  as  we  show  how 
to  construct  a  family  of  auxiliary  and  secondary  elements  having  all 
the  properties  (a),  (b),  and  (c)  listed  above.  For  this,  we  can 
proceed  as  follows. 

Begin  with  all  places  a  such  that  ^(ol)  =  i^ .  Assign  disjoint 
infinite  sets  of  integers  n  >^  3  to  these  places,  and  for  each  integer  n 
assigned  to  a  build  the  singleton  { n} .   Define  half  these  singletons  to 
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be  auxiliary  elements  resident  at  a,   and   the  other  half  of  these 
singletons  to  be  secondary  elements  resident  at  a. 

Next  suppose  that  there  are  cyclic  places  a ,  but  continue  to 
suppose  that  there  are  no  trapped  places.  Then,  as  has  been  shown 
earlier,  there  is  a  place  Y  =  a^i  at  ?!)  and  a  path  through  the  Ugraph  G 
(see  condition  (1))  to  Y  from  any  other  cyclic  node.  Hence  by 
definition  of  the  map  ^  there  is  some  cycle  Y^...,Yni+l  °^  length  m  at 
least  2,  such  that  Y  j^  =  Yn^i  =  Y,  and  Y^+i  =  "Ky^),  i  =  l,...m.  (Note 
that  this  cycle  is  allowed  to  contain  repetitions.)  Define  the  set  ii^ 
for  all  n  >_  0  by  0g  =  0,  0j^^.^  =  {t)^)  ,  and  let  all  the  sets  ()^  of  this 
form  with  n  =  1  -  j  (mod  m)  be  secondary  elements  resident  at  Y  ^. 
(Since  all  these  elements  are  inserted  into  a        initially,  we  have 

(5  £  0  =  <Jci  as  noted  above.)  Then  form  all  pairs  ^^n'^n+r^  ^"^  ^^^ 
all  such  pairs  with  n  =  m-j  (mod  m)  be  additional  secondary  elements 
resident  at  Y  j  .  Finally,  form  all  singletons  t^  =  { { i&j^ , f!!)j^+jj} }  and  let 
all  those  with  n  =  m-l-j  (mod  m)  be  resident  at  y  j  .  Take  the  infinite 
set  of  the  singletons  of  this  last  form  resident  at  y  j  and  divide  this 
set,  in  any  convenient  way,  into  disjoint  parts,  both  infinite;  define 
the  singletons  belonging  to  one  of  these  parts  to  be  auxiliary  elements 
resident  at  Y  4  ,  while  the  singletons  of  the  other  part  are  defined  to 
be  secondary  elements  resident  at  y  ^  . 

Next  define  further  singletons  '"  ^  i  by  '"^1  =  ^n»  ^n  i+l  ~ 
{ifj^  A.  It  is  easy  to  see  that  T^n  i  ^  ^l  k^^  ^^^  ^'^^^  if  n  =  A  and  j 
<  k.  Indeed,  ir^  .  e  ^£  ^  implies  that  {^n»'^n-hn^  ^  ^l  k  '  ^"^  ^^^" 
clearly  ^  ^n'^^nW  ^*  ^^^i '<*Jl-hn>>  '  ^o  either  {^^.^nW  =t^£.^£-hn^. 
implying  n  =  £,  or  ^^n,(&ji+^}  G   ^£-f^  ,  which  is  impossible.    But   once 
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we  know   that  ^^  1  ^  ^i    k   i^pH^s  n  =  I,    It  follows  trivially  that  It 
must  also  Imply  k  >  j. 

We  have  associated  Infinitely  many  auxiliary  and  secondary 
elements  of  the  form  { n}  ,  where  n  Is  an  integer  >^  3,  with  each  place  a 
such  that  ^(o.)  =  ^.  Much  as  previously,  define  ^^I'^^^nl  ^  (n), 
TT^  ._l_j^     =    {-n  ^    .}  .      Then    ^n  j  ^  ^  i    k  would    imply    that 

^•^n'^nW  ^*  ^r  k  '  ^""^  hence  {(?>„. I^n+m^  ^  ^'  which  is  impossible  since 
all  the  elements  of  an  integer  are  themselves  integers.  For  the  same 
reason,  ^n  ^  e  tTj^  ,  is  impossible,  and  tt^^  j  e  ^£  i^  implies  that  n  =  I 
and  j  <  k. 

At  this  point  we  have  associated  infinitely  many  auxiliary  and 
secondary  elements  ^^  j^  ^  with  each  place  y'  of  the  cycle  Yi«««YnH-i  .  and 
with  each  y  such  that  'I' (y  )  =  ^,  and  it  only  remains  to  extend  this 
association  to  the  remaining  cyclic  and  safe  places.  For  this,  a 
simple  iterative  construction  can  be  used.  Regard  a  place  as  having 
been  treated  if  secondary  and  auxiliary  elements  ""  ^  a  or  ^^n  i  have 
already  been  associated  with  it.  If  any  untreated  places  remain, 
choose  some  a  which  has  already  been  treated  but  for  which  there  remain 

untreated  B^ 3^^  such  that  iK3^)  =  ...   =<l'(3j^.)  =a.   Divide  the 

infinitely  many  secondary  elements  tt  .  or  tt^  ^  resident  at  a  into  k 
subsequences,  all  infinite,  and  define  the  elements  -^  ^  ._,.^  (or  tt^^  ^^.p 
such  that  ir   .  (or  it   .)  belongs  to  the  i-th  of  these   subsequences   to 

be   resident  at  3  j^  ,  i  =  1 k.   Divide  the  infinite  set  of  resident 

items  thereby  associated  with  each  of  the  3^  into  two  infinite 
subsequences,  and  define  the  elements  of  one  of  these  subsequences  to 
be  auxiliary  elements  resident  at  3^  ,  while  the  elements  of  the  other 
subsequence   are   defined   to   be   secondary   elements  resident  at  3 ^  . 
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Continue  In  this  way  as  long  as  any  untreated  places  remain.  Finally, 
in  order  to  ensure  that  every  secondary  element  3  is  a  member  of  some 
auxiliary  element,  we  adopt  the  technical  convention  of  forming  {0}  as 
an  auxiliary  element  without  specific  residence  whenever  S  is  a 
singleton  secondary  element  for  which  {&}    is  not  otherwise  Introduced. 

It  is  clear  that  the  collection  of  auxiliary  and  secondary 
elements  A  constructed  in  this  way  satisfies  all  the  conditions  (a), 
(b),  (c),  (d)  stated  previously.  This  completes  our  treatment  of  the 
case  in  which  no  trapped  places  exist,  i.e.  shows  that  if  the  Ugraph  G 
appearing  in  condition  CI  has  no  trapped  nodes,  then  conditions  CI,  C2, 
C3  are  necessary  and  sufficient  for  the  satisfiability  of  P  by  a  model 
having  H  as  its  set  of  places. 

We  go  on  immediately  to  discuss  the  somewhat  more  complex  case  in 
which  trapped  places  t  can  exist.  Define  the  height  of  a  trapped  place 
T  and  the  height  of  a  set  s  as  above;  let  H  be  the  maximum  height  of 
any  trapped  place  x,  and  suppose  that  there  exists  a  model  M  with 
places  H ,  sets  o^  ,  etc.,  all  as  in  our  preceding  discussion.  For  each 
h,  let  F^  designate  the  finite  family  of  all  sets  of  height  <  h;  note 
(for  implicit  use  in  what  follows)  that  the  union  of  subsets  of  F,  is 
itself  a  subset  of  F>  .  As  shown  earlier,  a  C  Fu  for  all  trapped  t. 
Put  ''a  =  Oq  n  F^^j^  for  each  a.  Call  a  variable  x  trapped  if  a  C  x 
implies  that  a  is  trapped.  Plainly  if  t  is  trapped  then  a^  '^  '^x  S  ^H  » 
hence  if  x  is  trapped  Mx  =  u  '^a.  =  U  ^a  ^  ^H  '  ^^^^  ^^  ^^  ^  ^H+1 
and  then  Mx  e  a   n  Fu. i   =  a'    .   Let  x  be  a  variable  such  that  a   is 

X  X 

trapped.   Since  a  c  x  implies  a   =>  a ,  it  follows  that  x  is  trapped  and 

'^n   ^   '^n    '        ^^^      ^i      ~     Un(y^)   be  a  Uclause.   Let  a  be  a  trapped 
a  C  X        X 

place  and  suppose  that  a  c  y<  .   Then   Un(o  '  )   =   UnCOr,  )  C  (  U  Oo  )   n 


H+1 


=   U 
3eb 
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Og  ,  where  b  Is  the  set  of  places  3  such  that  ct  =>  3  .   Note 


that  these  S 's  are  all  trapped  and  0  ^  u.  . 

*         *  * 

For  a,0  e  n  U  {Q}  we  put  a   ~     3  if  a  =>  3  and  3  =>  a  ,  where  Y  =>  <S 

means  that  there  Is  a  directed  path,  possibly  null  (i.e.  y  =  ^),  from 
Y  to  6  . 

Clearly  ~  is  an  equivalence  relation.  Moreover  the  partition  of 
n  induced  by  ~  refines  the  crude  partition  of  the  set  of  all  places 
into  safe,  trapped  and  cyclic  places. 

By  [a]  we  will  denote   the   equivalence   class   (relative   to   the 

relation   ~  )   containing  a.    (These  are   the  strongly  connected 

components  of  the  Ugraph  G.  See  [AHU]   p.  189.)   Define   the   auxiliary 

directed   graph  G  induced  by  the  Ugraph  G  as  the  graph  whose  nodes  are 

the  equivalence  classes  of  ""  and  whose  edges  are  the  following: 

[a]    =>_   [3]    is  an  edge  of  G   if    [a]    ^    [3]    and   there     are     a  '  e    [ot  ] , 
G 

3'   e    [3]    such   that  a '   =>     3 '    is  an  edge   of    the  Ugraph  G. 

G 

It   is  obvious   that  G  has  no  self-loops,  and  that  G  is  acyclic. 

Next  suppose  that  there  are  cyclic  places.   Consider  the  subgraph  L  = 

{ [a ]  I  a   is   cyclic}   induced   by  G.   Obviously  L  is  acyclic  too,  and 

hence  since  L  is  finite  there  exist  elements  of  L  with  no  outgoing  edge 

to  any  other  element  of  L,  i.e.   the  set  M  =  {[a]  £  L  |  [a]  has  no 

outgoing  edge  in  L}  is  non-null.   Let  [a]   e  M.   Then  if  [a]  =>_  [3],   3 

G 

must  be   trapped.   Indeed,  by  the  definition  of  M,  3  cannot  be  cyclic; 

and  clearly  3  cannot  be  safe  because  otherwise  a  would  also  be  safe. 

Moreover  there  must  be  at   least  one  trapped  place  3  such  that  [a] 

=>_  [3],  because  as   observed   earlier   there   is   a   path   from  every 
G 

non-safe  place  to  the  place  at  |6,  and  the  place  at  fi  is  not  an  element 
of  [a]  since  It  is  not  cyclic.    Let   [«i],  ['^2^'       •••»   '"^k.^  ^^      "-^^ 
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eleraents   of   M.   For  each  [a^],      1   =  1 k,  consider  the  set  S^   = 

Oa    .   Let  Y^  be  an  element   of   S^   having  minimal   height. 

Without  loss  of  generality  we  can  assume  that  Y  <  e  Oq   .   Clearly 

1 

y.  <^6  »  where  b  Is  the  set  of  places  3   such  that  a^^  =>  3. 

Moreover,   by   the  minimality   of   the  height  of  Yj^  ,  no  element  of  Y  j^ 

belongs  to  S^  ;  from  which  It  follows   that   every   such   element   lies 

outside   the   union   U  a^      extended   over   all   cyclic  places  a.   Thus 

v.  C  U   Oo  .  where  b'  is  the  set  of  places  in  b  which  are   trapped. 

Hence  ^  i  S.    ^    ,  °i    '   w^^^h  implies   that  Y  ^  e  a^  n  Pj^^^   =  a'   . 

Various  other  useful  properties  of  the  elements  y  j^  now  follow  easily. 

Firstly,   for  every  i,j  e  {l,2,...,k},  y^  e  Y j  is  false.   Indeed  if 

there  exist  i,j  such  that  Y  j^  e   Y^  ,  then  1  i'  j  and  for  some   Sj^,...,S(. 

we  must  have  YiESiG...  eS(.eY-i.   That  implies  the  existence  of 

places  6i,...,e^  such  that  a  .  =>  B ,.  =>   ...   =>  3  ,  =>  o. .    ,   and  then 
i''t         Jg'-g      G^G^ 

plainly  all  the  ^ ^' s   are  cyclic  places.   From  this  it  follows  at  once 

* 
that  [a.]  =>  [a^\   which,   by   the  definition  of   the   [a^^l's,   is  a 

contradiction.   Moreover  for  each  1  e  {1,2 k}   and  each  trapped 

place  T,  Y^  e  a^  is  false.   Indeed  if  this  were  not  the  case,  it  would 

follow  as   above   that  a_   =>  6^   =>    ...   =>  3 i  =>  a •  ,  which  is 

^    G   '^    G         G   ^    G   ^ 

impossible,  since  a  is  trapped  while  a^  is  cyclic.  Another  important 
property  of  the  classes  [a^]  is  that  every  element  in  such  a  class  lies 
in  a  cycle.  To  see  this  take  any  element  a  of  [a^].  Then  there  must 
be  a  path  from  a  to  a  cycle  of  places.  But  no  edges  along  this  path 
can  exit  [a^],  since  if  any  did  it  would  have  to  terminate  at  a  trapped 
place  which  Is  clearly  impossible.  It  follows  that  {o.^\  must  contain 
at  least  one  cycle;  but  then  since  all  the  elements  of  [a^]  are 
equivalent,  it  follows  that  every  element  of  [a^]  lies  on  a  cycle. 
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By  the  definition  of  Oj^,...,a|^  ,  there  Is  a  path  from  every  cyclic 
place  to  at  least  one  of  the  a.'s.   This  allows  us   to  define  various 
maps  which  will  be  useful  in  the  following.   Specifically,  let  u^  = 

Un(y^)  be  a  Uclause.   For  each  place  «  ^  "t  »  '^^^'^^  must  exist  a  B  C  y^ 

such   that   3  =>  a .   If  any  such  B  is  non-trapped,  choose  such  a  g  and 

G 

call  it  <t)(a,y,);  otherwise  let  <))(a,y^)  be  any  trapped  B  such  that  3  => 
a  and  ^  S.  ^i  •   ^^  'l'(c.yi)  is  trapped  then  a  is  trapped  too,  and  a^    = 

a^    C      U  UnCOfl)  =  U  Un(ao),  where  b  is  the  set  of  all  places  B   such 
^   —  Beb     ^  Beb     '^ 

that  B  C  y.   and  B  =>  a .   As  in  the  previous  case  in  which  no  trapped 

-     ^  G 

places  exist,  we  can  define  a  good  Uorder  of  the  variables  occurring  in 
P  and  a  good  Umap  '^y^{a,y^)  having  properties  (ii),  (lii)  listed  just 
before  condition  C2  as  well  as  the  following  property: 

(  iv)   if  a   is  non-trapped,  then  all  places  in  11^  are  non-trapped. 

To  show  that  if  a  model  exists  condition  (iv)  an  always  be  satisfied 

along  with  the  other  conditions  (ii),  (iii)  we  reason  as  follows.   Let 

a^  be  non-trapped  and  a  e  11^  .    By  the  definition  of  H  ^^  (see   the 

paragraph   preceding   the  statement  of  conditions  (i),  (ii),  and  (iii)) 

we  have  Mx  e  o   .   Hence   there  are  elements   Sj^,...,Sj^   such   that 

Mx  e  s,  e   ...   ^    ^t  ^   '^<x    '        Suppose  that  a^  is  a  trapped  place.  Let 

o.^   ,  S>i,...,Q^   be  places  such  that  Mx  e  a^^  ,  Sj  e  Og  .   None  of   these 

X         1 

places  can  be  safe,   and  the  preceding  chain  of  memberships  implies 

(inductively)  that  a  =  B  ^  =>   ...   =>  B  i  =>   cx^  ,   so   that  all  the 

"^   G        G   ^   G   ^ 

places   in  the  sequence  must  be  trapped,  contradicting  our  assumption 
that  a^  is  not  trapped. 

The  preceding  discussion  shows  that  if  there  exists  a  model  M  of  P 

with   places   II   and  Ugraph  G  involving  trapped  places  t  ,  the  following 
combinatorial  conditions  must  be  satisfied: 
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Condltlon  CI' ;  Let  H  be  the  raaxiraura  height,  In  the  Ugraph  G,   of  any 
trapped  place  t  ,  and  let  Fu^i  as  above.   Then  there  must  be  a  map  a  •♦■ 
a^  of  places  to  disjoint  subsets  of  F^^^  such  that  a^   '^  <b   whenever  a  Is 
trapped,   nad   there   must   exist   a  map   x  ->■  a^  of  the  set  of  all  the 
variables  occurring  in  P  to  the  set  of  all  places,  such  that: 
(i)    If  X  e  y  (resp.   x  ^  y)  occurs  in  P  then  ctj^Cy)  =  I  (resp.   ^^S^^ 
=  0). 
(ii)   If   X  is   trapped   (that   is  all  places  a  such  that  a  C^  x  are 


trapped),  then   U   ^n  ^  '^a.    • 
a  c  X        x 


(tii)  If  \x^   =   Un(yj^)  is  a  Uclause  and  a  is  a  trapped  place   for 


which 


a  C  y.  ,   then  Un(a')   C   U  og  ,  where  b  is  the  set  of  places  3  such 

that  a  =>  B  . 
G   ■ 

(iv)   If   there  are  any  cyclic  places,   then  there  exists  a  set 

{ot]^, . . .  ,a^}   of  such  places,  each  lying  in  some  cycle  of  the  Ugraph  G, 

and  for  each  i  =  l,...,k  an  element  Y  j  e  o^j^   such  that  Y^  e  Yj  is 

false  for  every  i,j  =  I,...,k,  and  such  that  Y<  e  cfg  is  also  false  for 

every  i  =  l,...,k  and  every  trapped  place  3.  Moreover  for  each  a ^  the 

set  b.   of   trapped  places  3   such   that  a^  =>  3 ,  is  non-empty  and 

Y^  C  U  Oo    .      Finally,  there  must  exist  a  path  through  the  Ugraph  G 
3e  b^ 

forward  from  every  cyclic  place  a  to  some  a^  ,  i  =  l,2,...,k. 

Condition  Ql' :   There  must  exist  maps  <J>(oi,y^)  and  <t)^(a,y^)  defined  for 
places  a,  variables  x  and  Uclauses  u^^  =  Un(yj|^),   both  having  values 

(when  defined)  which  are  places  3  C  y .  such  that  3  =>  a  .   Moreover, 

—     ^  G 

there  must  exist  a  good  Uorder  of  the  variables  and   a   set   of   places 

n^  ,   for   each   variable   x,   such   that  If  a^^  is  non-trapped  then  all 
places  in  11   are  non-trapped,  and  (fi  ^^  must  be  a  good  Uraap  in   the   sense 
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of   the  previously  stated  condition  C2 ,  and  must  be  defined  for  every 

a  e  n   and  every  Uclause  u^  =■  Un(yj^)  such  that  «  "^  u^  .    In  addition, 

'i'(°'»y4)  must  be  defined  for  each  a  c  Uj^  and  must  be  non-trapped  If 

there  Is  any  non-trapped  Q   C   Yt    such  that  0  =>  a.   Moreover  If  <|)(a,y^) 

-1  Q  1 

Is   trapped,   then  we  must  have  o '  c  U  Un(ao'),  where  b  Is  the  set  of 

"  -  Beb     ^ 

all  places  0  C  y   such  that  0  =>  a. 

Condition  C3';  This  is  identical  to  condition  C3. 

We  shall  now  complete  our  analysis  by  showing  that  the  three  conditions 

CI',   C2',   C3'   are  not  only  necessary  but  also  sufficient   for 

satisfiability  of  the  clauses  P  by  a  model  having  the  set  of  places  11  . 

Suppose  therefore  that  these  conditions  are  satisfied.   To  construct  a 

model  M  for  the  clauses  P,  we  will  use  much  the  same  method  as   in  the 

easier  case   in  which  no  trapped  places  exist,  but  with  the  difference 

that  no  elements  are  ever  added  to  a  set  a   if  the  place  a  is   trapped; 

thus   for  trapped  places  we  will  always  have  ^^^    =  o^    ,      Our  first  step 

is  to  construct  a  sufficient  supply  of  auxiliary  and  secondary  elements 

resident  at  each  non-trapped  place.  We  begin  by  considering  the  case 

in  which  cyclic  places  do  occur.    (However  if   there  are  no  cyclic 

places   the  proof  is  much  the  same;  in  this  case  the  reader  has  only  to 

ignore  what  is  said  about  cyclic  places  in  the   following  paragraphs.) 

Define  an  auxiliary  map  ^    from  non-trapped  places  to  non— trapped  places 

as  follows.   Clause  (Iv)  of  condition  CI',   implies   the  existence  of 

cyclic  places  a^,...,a^^  ,  all  of  them  lying  in  some  simple  cycle,  which 

we  will  designate  byaj^  =  0j.j^=>  0^2^^   ••*   ^''^ira+l^^i'^   ^ 

*     G    '     G  1 

l,...,k,   ra^  >^  1.  For  each  of  the  places  B  ^    ^   we  put  ii  (B  ^    p  =  0  j^  -;+j  , 
1  _<  j  £  m^  ,  with  the  understanding  that  j  and  j+1  ar  then  modulo   m^^  . 
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(Note  that  no  two  of  the  cycles  S.  , , . . .  ,0 ^  „  Intersect.)  For  all 
remaining  cyclic  places  a  we  put  'j'Ca)  =  3,  where  B  lies  one  step  closer 
than  a  along  some  shortest  path  through  the  Ugraph  G  to  an  element  in 
one  of  these  cycles.  If  a  is  safe,  we  put  'I' (a )  =  fi  if  a  =>  Q  , 
otherwise  we  put  ii(a)  =  0,  where  S  lies  one  step  closer  to  H  than  does 
a  (again,  along  some  shortest  path  through  G  to  one  of  the  cycles 
above).  Condition  (iv)  of  CI'  ensures  that  i)  is  well  defined  for  all 
cyclic  places.  Moreover  it  is  obvious  that  if  ct  is  cyclic  then  ^(a)  is 
cyclic  too.  For  eacha^  ,  i  =  1,2, ...,k,  define  setsYj^"  byy^  ^  = 
y^    ,  Yi  ^   =  {y^"^},  where  y^  e  o^      is  the  element  appearing  in  (iv) 

of   CI'.    Define   all   the  Yj^"^  with  n  =  1-j  (mod  m^)  to  be  secondary 

/  s     (n+ra^) 
elements  resident  at  3  ^  .  ;  also,  form  all  pairs  (y  j^   ,  Y^     J  i   and 

let  all  the  pairs  of   this  form  with  n  =  m^^-j  (mod  m^)  be  secondary 

elements  resident  at  B^  .  also.   Next  define  singletons  n"  =  {{y^"  , 

(n+m^) 
y^  }},   and  take  each  such  singleton  with  n  =  m.-I-j  (mod  m^)  to  be 

resident  at  5^  ^  .    Divide   the  infinite   set  of   these  singletons 

resident  at  3^  j   in  any  convenient  way  into  two  disjoint  infinite 

parts;  define  singletons  belonging  to  one  of   these  parts   to  be 

auxiliary  elements   resident  at  & i    a    ,      and  define   the  singletons 

belonging  to  the  other  of  these  parts  to  be  secondary  elements  resident 

atB.^j. 

Next  define   further  singletons  ir^*"  by  iiJ»^  =  it  ^  ,  ir^*^'*'^  = 

(ir^t"}.   Using  the  fact  that  y^   e  y^  is  false  for  every  i,l    =   l,...,k 

it  is  easy  to  see  that  we  have  tiJ»'^  e  ^jP*™  ^^^  1  ==  '^  »  J  =  P  and  n  <  m. 

The  definitions  stated  in  the  preceding  paragraph  associate   Infinitely 

many   secondary  and  auxiliary  elements  of  the  form  irJ'^  with  each  place 

3  belonging  to  any  cycle  a  ^,   ^  (a^) ,    >l)    (a  ^) ,    .  .  .      with   ie{l,2,...,k}. 
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but  we  need  to  extend  this  association  to  the  remaining  cyclic  places 
and  to  treat  the  safe  places.  For  this,  much  the  same  simple 
construction  as  before  Is  available.  We  use  the  fact  that  If  a  is 
cyclic  (resp.  safe)  then  ^(.a)  Is  cyclic  (resp.  safe  orQ),  and  that 
repeated  application  of  the  map  i>  must  eventually  bring  any  place  a  to 
one  of  the  places  with  which  auxiliary  and  secondary  places  have 
alregady  been  associated.  More  specifically,  regard  a  cyclic  place  as 
having  been  treated  if  secondary  and  auxiliary  elements  uJ'^  have 
already  been  associated  with  it.  If  any  untreated  cyclic  places 
remain,  choose  some  a  which  has  already  been  treated  but  for  which 
there  remain  untreated  6j,...,6|^  such  that  i|/(Bj)  =  ...  =  '|'(6j^)  =  a  (by 
the  observation  made  just  above,  such  an  a  must  exist).  Divide  the 
infinitely  many  secondary  elements  irJ>^  resident  at  a  into  I 
subsequences,  all  infinite,  and  let  the  elements  irj»"  '^  such  that  irJ»" 
belongs  to  the  p-th  of  these  subsequences  be  resident  at  3  ,  p  = 
I,...,Jl.  Divide  the  infinite  set  of  resident  items  associated  in  this 
way  with  each  of  the  S  into  two  Infinite  subsequences,  and  define  the 
elements  of  one  of  these  subsequences  to  be  auxiliary  elements  resident 
at  ^n  ,  and  the  elements  of  the  other  subsequence  to  be  secondary 
elements  resident  at  6  .  Continue  in  this  way  as  long  as  there  remain 
any  untreated  cyclic  places. 

To  handle  the  safe  elements  begin  with  the  finite  set  N  of  places 
a  such  that  ii(ct)  =  $1 .  Divide  the  infinite  set  of  singletons  { n}  ,  where 
n  is  an  Integer  and  n  >  H+1 ,  into  an  appropriate  number  of  infinite 
subsets,  and  define  the  elements  of  each  of  these  subsequences  to  be 
resident  at  a  corresponding  place  a  in  N.  Divide  the  singletons  thereby 
assigned  to  a  into  two  infinite  subsequences,  and  define   the   elements 
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of  one  of  these  subsequences  to  be  secondary  elements  resident  at  a; 
the  elements  of  the  other  subsequence  are  defined  to  be  auxiliary 
elements  resident  at  a.  Then  use  the  map  ^  In  the  same  Iterative 
fashion  as  In  the  preceding  paragraph,  until  resident  auxiliary  and 
secondary  elements  have  been  assigned  to  all  safe  places.  (Again,  we 
adopt  the  technical  convention  of  regarding  { A)  as  an  auxiliary  element 
without  specific  residence  whenever  A  Is  a  singleton  secondary  element 
for  which  {a}  Is  not  otherwise  Introduced.) 

Much  as  In  the  simple  case,  free  of  trapped  places,  treated 
earlier,  the  construction  just  outlined  associates  Infinitely  many 
resident  auxiliary  elements  A  and  secondary  elements  B  with  each 
non-trapped  place  a.  These  are  easily  seen  to  have  the  following 
properties: 

(a)  Every  secondary  element  B  satlslfes  Be  A,  where  A  Is  some 
auxiliary  element  (not  necessarily  resident  at  the  same  place). 

(b)  No  two  auxiliary  elements  A, A'  can  satisfy  A  e   A' . 

(c)  If  t(o')  ^  ^,  every  element  of  an  auxiliary  or  secondary 
element  resident  at  a  non-trapped  place  a.  Is  either  a  secondary  element 
resident  at  <J;(a),  or  Is  an  element  of  On  for  some  trapped  place  3  such 
that  a  =>  3 ,  the  second  possibility  only  arising  for  elements  of 
secondary  Items. 

(d)  No  auxiliary  or  secondary  element  A  resident  at  a  non-trapped 
place  a  satisfies  A  e  a^    for  any  trapped  place  B. 

(e)  The  sets  of  auxiliary  and  secondary  elements  resident  at 
distinct  non-trapped  places  are  disjoint. 

Once  having  associated  infinitely  many  distinct  auxiliary  and 
secondary  places  with  each  non-trapped  place  a  in  a  manner   satisfying 
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conditlons   (a)-(e),   we   can  build   a  model   for  the  clauses  of  P  as 
follows: 

(1)  Arrange  the  infinite  sequence  of  auxiliary  elements  resident 
at  each  non-trapped  a  in  1-1  association  with  the  lattice  points  of  the 
plane,  thereby  giving  them  a  lexicographic  order.  As  In  the  simpler 
case  considered  previously,  this  ensures  that  the  Iterative 
construction  described  in  the  next  few  paragraphs  will  never  exhaust 
the  supply  of  auxiliary  elements  A  resident  at  any  a. 

(2)  Initialize  each  of  the  sets  a^  ,  for  trapped  a  only,  by 
inserting  all  the  elements  of  a^  into  o^  .  If  ct  is  not  trapped,  insert 
all  the  secondary  elements  resident  at  a  of  height  at  least  H+1  into 
o      .      In  addition,  if  a  is  non-trapped,  put  three  distinct   and   unique 

auxiliary  elements  resident  at  a  into  a^ .   Let  { A^ A3j^}  be  the  set 

of  all  auxiliary  elements  used  for  this.  Note  that  at  the  end  of  this 
step,  all  the  a^  are  disjoint,  and  if  a  is  non-trapped  o^  contains  at 
least  3  elements. 

(3)  By   the  (t>-<J^ -stabilization  process  defined  by  the  map  <!> 

appearing  in  condition  C2'   and   the  map  i)      defined  previously  we 

designate  the  following  operation:  If  p  has  been  put  into  a^  ,  then  for 

all  Uclauses  u^  =  Un(yj^)  such  that  ot  _  u^  which  are  such  that  the  place 

3^  =  <Ji(a,y^)  is  non-trapped,  proceed  as  follows.   Choose  a  previously 

unused  auxiliary  element  A^  resident  at  ^(.$^)    (observe  that  since  $j  is 

non-trapped  and  &.    =>  i)(Qt),  ^i&i)    is  a  non-trapped  place  and  thus  has 

G 

associated  auxiliary  and  secondary  elements),  put  the  pair  {p,A^}  into 

the  set  Og  ,  and  also  put  A^   into  cTii,  (g  )  •    Note   that   when   It   is 

generated,  the   pair   {p,A.}   must   be   distinct   from  all   elements 

previously  inserted  into  any  of  the  o   ,  and  so  must  be   the   auxiliary 
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eleraent  A^  .  Indeed,  the  singleton  A^^  cannot  be  a  previously  formed 
pair,  nor  can  It  equal  any  element  of  any  a^  ,  t  trapped,  or  any 
secondary  element  resident  at  any  non-trapped  place  or  any  previously 
used  auxiliary  element  A.  Moreover,  {p,A^}  can  never  equal  any 
previously  used  auxiliary  element,  nor  can  It  equal  any  secondary 
element  B,  since  then  there  would  exist  an  auxiliary  A  such  that 
A.  e  A,  which  is  impossible.  Finally,  for  the  same  reason  as  in  the 
simpler  case  considered  previously,  in  which  there  exist  no  trapped 
places,  {p,A}  can  never  equal  any  previously  formed  pair  {q,A'}. 

It  follows  that  the  sets  a^  remain  disjoint  throughout  the 
(ji-ij'-stabilization  process,  which  continues  until  a  pair  {p,A}  has  been 
formed  for  any  p  inserted  into  any  set  a^  such  that  there  is  a  Uclause 
u,  =  Un(yj^)  for  which  a  ^  u^^  and  ijiCajYi)  is  non-trapped.  Moreover, 
before  the  <))-<p-stabillzation  process  begins,  we  have  Un(0„  )  C  Oo 
for  each  Uclause  u.  =  UnCy^)   and  "^  C  y^  .    Indeed,   for  a.      trapped 

Un(a')  C  U  Ofl  by  (ill)  of  condition  CI',  where  b  is  the  set  of  places 

'^     -  Beb  ^ 

3  C  u.  such  that  a  =>  0.   Moreover  by  condition  (c)  just  above  every 

~     ^  G 

element  of  a  secondary  element  p  inserted  into  a      is  either  a  secondary 

element  inserted  into  iIj  (6 )  C  u .  or  is  an  element  of  Og  for  some  trapped 

3   such   that   3  C  u^    and   a   =>  S .   On  the  other  hand   the 

-  ^  G 

<{)-i|'-stabillzatlon  process  does  not  disturb  this  condition,  since  a  pair 
{p,A}  is  only  inserted  Into  Oq  ,  where  3  C  y^^  ,  when  p  is  already  in 
some  a^  with  a  C  u^^  ;  moreover  A  is  then  inserted  into  ^vh  (g  )  »  which 
must  also  satisfy  ^J;  (3 )  C  u .  .  (Note  also  that  by  (c)  above,  when  A  is 
Inserted  into  '^^(a)    ,   all   the   elements   of   A  are   already   present 

^    Og.) 

SCu^ 

Thus,   for   each  Uclause   u,  =  UnCy^^)  and  a  C  y   ,  we  continue  to 
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have  Un(a  )  c   U    ^R    ^^    the  end  of   the  ((i-^-stablllzation   process. 
However,  we  also  have  Og  c  Un(aa,/o  y   )^      ^^     ^  S  '^i  ^"^  •t'CS.yj^)  Is 
non-trapped.   Moreover,  If  <^(.Q,yj)    is  trapped  then  S  is  trapped  too  and 

it   follows  by  condition  C2'  that  Oo  =  Oo    C      Un(a'),  where  b  is  the 

•^    ^  ye  b     ' 

set  of  places  Y  C  Yj  such  that  Y  =>  B  (all  these  places  are   trapped). 
~  ^  G 

But   in  this  case  u  UnCo')  =   u  Un(o^),  and  hence  Oo  C  U  Un(0^ )  In 
yeb     '    YGb     '  ^   ~  Yeb     ' 

every  case,  i.e.   at  the   end   of   the  <|'~'l'~stabilization   process   all 

Uclauses  are  correctly  modeled.   Moreover,  since  the  non-empty  sets  Og 

remain  disjoint  throughout  the  (Ji-^j^-stabilization  process,  all  clauses  x 

=  yuz,  x  =  y\z,  and  x  =  t>   are  correctly  modeled  also.   In  addition, 

since  the  value  Mx  assigned  to  a  variable  x  is  always  understood  to  be 

U   a   ,   it   follows   from  (i)   and   (ii)  of  condition  CI'  that  the 
OCX 

clauses  x  e  y  and  x  ^  y  containing  a  given  variable  x  are  correctly 

modeled  whenever  the  place  a   is  trapped  (indeed  if  a^  is  trapped,  by 

condition  C3'  the  variable  x  is  also  trapped). 

(4)  It  only  remains  to  extend  the  model  M  so  as  to  force  clauses 

X  e  y  and  x  ^  y  to  be  correctly  modeled  even  if  a^  is  not  trapped. 

This  can  be  done  by  applying  exactly  the  method  described  previously 

for  the  case  in  which  no  trapped  places  exist.   That  is,  we  arrange  all 

the  variables  appearing  in  P  in  the  (ascending)  good  Uorder  mentioned 

in  condition  C2'.   To  process  a  variable  x,  we  insert  Mx  into  the  set 

o        if  Mx  is  not  already  in  a      .   (Note,  in  particular,  that  variables 
x  X 

X  such  that  a  is  trapped  require  no  processing.)  After  each  such 
insertion,  we  restabilize  to  ensure  the  validity  of  all  Uclauses,  using 
the  (j) ^-stabilization  process  just  as  in  the  absence  of  trapped  places 
rather  than  the  (})-<|)-stabilization  process  used  in  step  (3).  Note  that 
if  Cj^   is  non-trapped  then  by  condition  C2 '  all  the  places  3  for  which 


-27- 
Og   is   affected   by   the  <))  ^-stabilization   process   are   non-trapped. 
Moreover,   as  it  was  pointed  out  In  (111)  just  preceding  the  definition 
of  the  auxiliary  and  secondary  elements  in  the  case  in  which  no  trapped 
places  exist,  neither  insertion  of  the  Mx's  Into  a        nor  the  subsequent 

X 

stabilization  operations  disrupt  any  relationship  My  =  ^        ^r.  »  where 

a  C    y 

y   either  precedes  x  in  the  good  Uorder  of  variables  or  Is  equal  to  x. 

As  in  the  simpler  case  considered  previously,  to  justify  the 
remarks  made  in  the  preceding  paragraph  we  must  establish  that  no  set 
Mx  Inserted  into  a  set  a   at  the  start  of  a  phase  of  the  construction 

X 

described  in  the  preceding  paragraph  is  either  equal   to  a  previously 

constructed   auxiliary  or  secondary  element  A,  pair  {p,A} ,  element  of  a 

set  On    with  B  trapped,  or  previously  constructed  model  My.   This  can  be 

shown  as   follows.   Suppose,  first,  that  x  is  non-trapped,  so  that  Mx 

contains  at  least  three  elements,  all  of  height  at  least  H+1 .   Thus,  Mx 

clearly  cannot  equal  any  auxiliary  element  A  or  pair  {p,A} ,  nor  can  it 

equal  any  secondary  element  B  since  every  such  element  which  is  neither 

a  singleton  or  a  pair  is  of  height  at  most  H.  Moreover,  Mx  =My  cannot 

hold  if  the  variables  x  and  y  are  distinct  because  at  every  stage  of 

our  construction  the  sets  a^  remain  pairwise  disjoint.   Finally,  Mx 

^      ^    "'S  >  because,  as  observed  above,  Mx  has  elements  of  height 
B  trapped  ^ 

at  least  H+1.  This  shows  that  if  x  is  non-trapped,  neither  insertion 
of  Mx  into  a        nor  the  subsequent   stabilization  process  disrupt   the 

X 

disjointness  of  sets  a  .  Next  consider  the  case  in  which  the  variable 
X  is  trapped,  but  In  which  the  place  a  is  non-trapped  (since  otherwise 
we   would   not   have   to  insert  Mx  in  a      ,  because  by  (11)  of  condition 

X 

(Cl')  Mx  would  already  be  there).  Since  x  is  trapped,  Mx  has  height  at 
most   H.   Hence  Mx  is  different  from  any  auxiliary  or  secondary  element 


•>'     1 .  '\  > 


j;i"     J 


-28- 

resldent  at  any  safe  place,  since  these  elements  have  height  greater 

than  H.  For  the  same  reason  Mx  is  different  from  any  pair  {p,A}  with  A 

resident  at  a  safe  place.   On  the  other  hand,  Mx  cannot  equal  any 

auxiliary  A  or  pair  {p,A}  with  A  resident  at  a  cyclic  place,  nor  can  it 

equal  any  secondary  element  B  resident  at  a  cyclic  place  and   different 

from  the  Y^'s,  because  for  each  such  pair  or  element  C,  we  have  Y^  £   C 

for  some  j  e  {  1 ,2, . . .  ,k.}  ,  whereas  by   (iv)   of   CI',   it   follows   from 

Mx  C     U     Oo  that  Y  1  G  Mx  is  false  for  all  y ^.   Moreover,  by  (ii) 
~  6  trapped  p       J  J 

of  CI',  we  have  Mx  e  a '   ,  and  hence  since  a   is  non-trapped  it  follows 

"x  ^ 

by  the  disjointness  of  the  a'  that  Mx  ^     '-'    Oo    .      For  the  same 
'  "^  e  trapped  ^ 

reason,  Mx  can  neither  equal  any  Yj  which  does  not  belong   to  a'        nor 

X 

could  it  equal  an  element  Y  ^  £  o^^  since  we  suppose  that  Mx  is  not  in 
o^  before  processing  of  the  variable  x  (whereas  all  Y  j[  are  inserted 
into  the  a^  to  which  they  belong  during  the  initialization  phase). 
Finally  Mx  cannot  equal  any  My  with  y  distinct  from  x  since  at  every 
stage  of  our  construction  the  sets  a^    remain  pairwise  disjoint. 

As  in  the  absence  of  trapped  places,  the  insertion  of  Mx  into  a 

X 

does  not  upset  any  relationship  Un(My.)  _9  Mu^  ,  since  whenever  Mx  is 
Inserted  into  My^  we  have  cx^  C  y.  ,  and  then  a  C  x  implies  a  C  u^  by 
condition  C3',  so  Un(Myj^)  C  Mu^  remains  valid. 

Taking  all  in  all  it  follows  that,  just  as  in  the  simpler  case 
considered  previously  (i.e.  in  the  absence  of  trapped  places),  all  the 
clauses  of  P  will  be  modeled  correctly  at  the  end  of  the  series  of 
steps  described.  This  shows  that  P  is  satisfiable  by  a  model  having  II 
as  its  set  of  places  if  and  only  if  conditions  CI',  C2',  and  C3'  are 
satisfied.  Note  finally  that,  even  though  the  wording  of  the  preceding 
discussion  occasionally  assumes  that  cyclic  places  are  present,  no  real 


-29- 
use  is  made  of  the  existence  of  cyclic  places,  I.e.   simply  by  ignoring 
what  is  said  about  such  places  we  can  still  build  a  model  of  P. 

This  completes  the  proof  of  decidability  of  multilevel-syllogistic 
extended  by  the  general  union  operator  in  all  possible  cases. 
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